CVE-2022-0847

HIGH KEV RANSOMWARE

Dirty Pipe Local Privilege Escalation via CVE-2022-0847

Title source: metasploit

Description

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

Exploits (120)

nomisec WORKING POC 1,128 stars
by Arinerron · local
https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
nomisec WORKING POC 685 stars
by AlexisAhmed · local
https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
nomisec WORKING POC 280 stars
by r1is · local
https://github.com/r1is/CVE-2022-0847
nomisec WORKING POC 89 stars
by Al1ex · local
https://github.com/Al1ex/CVE-2022-0847
nomisec STUB 78 stars
by DataDog · poc
https://github.com/DataDog/dirtypipe-container-breakout-poc
nomisec SCANNER 69 stars
by basharkey · poc
https://github.com/basharkey/CVE-2022-0847-dirty-pipe-checker
nomisec WORKING POC 58 stars
by ZZ-SOCMAP · poc
https://github.com/ZZ-SOCMAP/CVE-2022-0847
nomisec WORKING POC 51 stars
by bbaranoff · local
https://github.com/bbaranoff/CVE-2022-0847
nomisec WORKING POC 49 stars
by febinrev · poc
https://github.com/febinrev/dirtypipez-exploit
nomisec WORKING POC 46 stars
by knqyf263 · poc
https://github.com/knqyf263/CVE-2022-0847
nomisec WORKING POC 34 stars
by greenhandatsjtu · poc
https://github.com/greenhandatsjtu/CVE-2022-0847-Container-Escape
nomisec WORKING POC 29 stars
by airbus-cert · poc
https://github.com/airbus-cert/dirtypipe-ebpf_detection
nomisec WORKING POC 26 stars
by chenaotian · poc
https://github.com/chenaotian/CVE-2022-0847
nomisec WORKING POC 21 stars
by ahrixia · poc
https://github.com/ahrixia/CVE_2022_0847
nomisec WORKING POC 15 stars
by breachnix · poc
https://github.com/breachnix/dirty-pipe-poc
nomisec WORKING POC 12 stars
by 0xIronGoat · poc
https://github.com/0xIronGoat/dirty-pipe
nomisec WORKING POC 12 stars
by n3rada · local
https://github.com/n3rada/DirtyPipe
nomisec WORKING POC 9 stars
by crusoe112 · local
https://github.com/crusoe112/DirtyPipePython
nomisec WORKING POC 9 stars
by LudovicPatho · poc
https://github.com/LudovicPatho/CVE-2022-0847_dirty-pipe
nomisec WORKING POC 9 stars
by crowsec-edtech · poc
https://github.com/crowsec-edtech/Dirty-Pipe
nomisec WORKING POC 9 stars
by xndpxs · poc
https://github.com/xndpxs/CVE-2022-0847
nomisec WORKING POC 8 stars
by h4ckm310n · local
https://github.com/h4ckm310n/CVE-2022-0847-eBPF
nomisec WORKING POC 8 stars
by rexpository · poc
https://github.com/rexpository/linux-privilege-escalation
nomisec WORKING POC 7 stars
by qwert419 · local
https://github.com/qwert419/linux-
nomisec WORKING POC 7 stars
by drapl0n · poc
https://github.com/drapl0n/dirtypipe
nomisec WORKING POC 6 stars
by arttnba3 · local
https://github.com/arttnba3/CVE-2022-0847
nomisec WORKING POC 6 stars
by Mustafa1986 · poc
https://github.com/Mustafa1986/CVE-2022-0847-DirtyPipe-Exploit
nomisec WORKING POC 5 stars
by yoeelingBin · poc
https://github.com/yoeelingBin/CVE-2022-0847-Container-Escape
nomisec SCANNER 4 stars
by MrP1xel · poc
https://github.com/MrP1xel/CVE-2022-0847-dirty-pipe-kernel-checker
nomisec WORKING POC 4 stars
by 4luc4rdr5290 · poc
https://github.com/4luc4rdr5290/CVE-2022-0847
nomisec WORKING POC 4 stars
by DanaEpp · poc
https://github.com/DanaEpp/pwncat_dirtypipe
nomisec WORKING POC 3 stars
by eduquintanilha · poc
https://github.com/eduquintanilha/CVE-2022-0847-DirtyPipe-Exploits
nomisec WORKING POC 3 stars
by nanaao · poc
https://github.com/nanaao/dirtyPipe-automaticRoot
nomisec WORKING POC 3 stars
by Shotokhan · poc
https://github.com/Shotokhan/cve_2022_0847_shellcode
nomisec WORKING POC 3 stars
by sa-infinity8888 · poc
https://github.com/sa-infinity8888/Dirty-Pipe-CVE-2022-0847
nomisec WORKING POC 3 stars
by EagleTube · local
https://github.com/EagleTube/CVE-2022-0847
nomisec WORKING POC 2 stars
by jpts · poc
https://github.com/jpts/CVE-2022-0847-DirtyPipe-Container-Breakout
nomisec WORKING POC 2 stars
by puckiestyle · poc
https://github.com/puckiestyle/CVE-2022-0847
nomisec WORKING POC 2 stars
by dadhee · local
https://github.com/dadhee/CVE-2022-0847_DirtyPipeExploit
nomisec SCANNER 2 stars
by mhanief · poc
https://github.com/mhanief/dirtypipe
nomisec WORKING POC 2 stars
by cspshivam · poc
https://github.com/cspshivam/CVE-2022-0847-dirty-pipe-exploit
nomisec WORKING POC 2 stars
by CYB3RK1D · poc
https://github.com/CYB3RK1D/CVE-2022-0847-POC
nomisec WRITEUP 2 stars
by ihenakaarachchi · poc
https://github.com/ihenakaarachchi/debian11-dirty_pipe-patcher
nomisec WORKING POC 2 stars
by gyaansastra · local
https://github.com/gyaansastra/CVE-2022-0847
nomisec WORKING POC 2 stars
by byteReaper77 · local
https://github.com/byteReaper77/Dirty-Pipe
nomisec WORKING POC 2 stars
by JlSakuya · local
https://github.com/JlSakuya/CVE-2022-0847-container-escape
nomisec WORKING POC 2 stars
by mutur4 · local
https://github.com/mutur4/CVE-2022-0847
nomisec WORKING POC 2 stars
by Gustavo-Nogueira · local
https://github.com/Gustavo-Nogueira/Dirty-Pipe-Exploits
nomisec WORKING POC 2 stars
by VinuKalana · local
https://github.com/VinuKalana/DirtyPipe-CVE-2022-0847
nomisec WORKING POC 2 stars
by tmoneypenny · local
https://github.com/tmoneypenny/CVE-2022-0847
nomisec WORKING POC 2 stars
by zzzchuu · poc
https://github.com/zzzchuu/Dirty-Pipe
nomisec WORKING POC 1 stars
by 0xeremus · local
https://github.com/0xeremus/dirty-pipe-poc
nomisec WORKING POC 1 stars
by scopion · poc
https://github.com/scopion/dirty-pipe
nomisec SCANNER 1 stars
by muhammad1596 · poc
https://github.com/muhammad1596/CVE-2022-0847-dirty-pipe-checker
nomisec SCANNER 1 stars
by realbatuhan · poc
https://github.com/realbatuhan/dirtypipetester
nomisec NO CODE 1 stars
by pashayogi · local
https://github.com/pashayogi/DirtyPipe
nomisec WORKING POC 1 stars
by lucksec · local
https://github.com/lucksec/CVE-2022-0847
nomisec WORKING POC 1 stars
by b4dboy17 · local
https://github.com/b4dboy17/Dirty-Pipe-Oneshot
nomisec WORKING POC 1 stars
by joeymeech · local
https://github.com/joeymeech/CVE-2022-0847-Exploit-Implementation
nomisec WORKING POC 1 stars
by Mephierr · local
https://github.com/Mephierr/DirtyPipe_exploit
nomisec WORKING POC 1 stars
by xiaoLvChen · local
https://github.com/xiaoLvChen/CVE-2022-0847
nomisec WORKING POC 1 stars
by Turzum · local
https://github.com/Turzum/ps-lab-cve-2022-0847
nomisec WORKING POC 1 stars
by karanlvm · local
https://github.com/karanlvm/DirtyPipe-Exploit
nomisec WORKING POC 1 stars
by mrchucu1 · local
https://github.com/mrchucu1/CVE-2022-0847-Docker
nomisec WORKING POC 1 stars
by ITMarcin2211 · poc
https://github.com/ITMarcin2211/CVE-2022-0847-DirtyPipe-Exploit
nomisec WORKING POC
by notl0cal · local
https://github.com/notl0cal/dpipe
nomisec STUB
by jonathanbest7 · poc
https://github.com/jonathanbest7/cve-2022-0847
nomisec WORKING POC
by edsonjt81 · local
https://github.com/edsonjt81/CVE-2022-0847-DirtyPipe-
nomisec WORKING POC
by JustinYe377 · poc
https://github.com/JustinYe377/CTF-CVE-2022-0847
nomisec WORKING POC
by DataFox · local
https://github.com/DataFox/CVE-2022-0847
nomisec WORKING POC
by pmihsan · local
https://github.com/pmihsan/Dirty-Pipe-CVE-2022-0847
nomisec WORKING POC
by ajith737 · local
https://github.com/ajith737/Dirty-Pipe-CVE-2022-0847-POCs
nomisec WORKING POC
by Greetdawn · poc
https://github.com/Greetdawn/CVE-2022-0847-DirtyPipe
nomisec WORKING POC
by orsuprasad · local
https://github.com/orsuprasad/CVE-2022-0847-DirtyPipe-Exploits
nomisec WORKING POC
by tufanturhan · poc
https://github.com/tufanturhan/CVE-2022-0847-L-nux-PrivEsc
nomisec WORKING POC
by bohr777 · poc
https://github.com/bohr777/cve-2022-0847dirtypipe-exploit
nomisec WORKING POC
by nanaao · poc
https://github.com/nanaao/Dirtypipe-exploit
nomisec WORKING POC
by 0xr1l3s · poc
https://github.com/0xr1l3s/CVE-2022-0847
nomisec WORKING POC
by ayushx007 · local
https://github.com/ayushx007/CVE-2022-0847-DirtyPipe-Exploits
nomisec WORKING POC
by solomon12354 · local
https://github.com/solomon12354/LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus
nomisec WORKING POC
by xsxtw · local
https://github.com/xsxtw/CVE-2022-0847
nomisec WORKING POC
by muhammad1596 · local
https://github.com/muhammad1596/CVE-2022-0847-DirtyPipe-Exploits
nomisec WORKING POC
by mithunmadhukuttan · local
https://github.com/mithunmadhukuttan/Dirty-Pipe-Exploit
nomisec WRITEUP
by stfnw · poc
https://github.com/stfnw/Debugging_Dirty_Pipe_CVE-2022-0847
nomisec WRITEUP
by CPT-Jack-A-Castle · poc
https://github.com/CPT-Jack-A-Castle/CVE-2022-0847
nomisec WRITEUP
by real-tim-johnston · poc
https://github.com/real-tim-johnston/megaquagga-pentest-report
nomisec WORKING POC
by osungjinwoo · poc
https://github.com/osungjinwoo/CVE-2022-0847-Dirty-Pipe
nomisec WORKING POC
by SimoesCTT · poc
https://github.com/SimoesCTT/Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847
nomisec WORKING POC
by si1ent-le · poc
https://github.com/si1ent-le/CVE-2022-0847
nomisec WORKING POC
by morgenm · poc
https://github.com/morgenm/dirtypipe
nomisec WORKING POC
by stfnw · poc
https://github.com/stfnw/reproducer-poc-CVE-2022-0847
nomisec WORKING POC
by jxpsx · poc
https://github.com/jxpsx/CVE-2022-0847-DirtyPipe-Exploits
nomisec SCANNER
by ayushx007 · poc
https://github.com/ayushx007/CVE-2022-0847-dirty-pipe-checker
nomisec WORKING POC
by RogelioPumajulca · remote
https://github.com/RogelioPumajulca/CVE-2022-0847
nomisec WORKING POC
by isaiahsimeone · poc
https://github.com/isaiahsimeone/COMP3320-VAPT
nomisec WORKING POC
by Shadow-Spinner · local
https://github.com/Shadow-Spinner/CVE-2022-0847
nomisec WRITEUP
by bluedragonsecurity · poc
https://github.com/bluedragonsecurity/Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-
nomisec WORKING POC
by V0WKeep3r · poc
https://github.com/V0WKeep3r/CVE-2022-0847-DirtyPipe-Exploit
nomisec STUB
by letsr00t · poc
https://github.com/letsr00t/CVE-2022-0847
nomisec WORKING POC
by githublihaha · poc
https://github.com/githublihaha/DirtyPIPE-CVE-2022-0847
nomisec WORKING POC
by edsonjt81 · poc
https://github.com/edsonjt81/CVE-2022-0847-Linux
nomisec WORKING POC
by babyshen · poc
https://github.com/babyshen/CVE-2022-0847
nomisec STUB
by Greetdawn · poc
https://github.com/Greetdawn/CVE-2022-0847-DirtyPipe-
nomisec WORKING POC
by cypherlobo · local
https://github.com/cypherlobo/DirtyPipe-BSI
nomisec WORKING POC
by pentestblogin · poc
https://github.com/pentestblogin/pentestblog-CVE-2022-0847
nomisec WORKING POC
by AyoubNajim · poc
https://github.com/AyoubNajim/cve-2022-0847dirtypipe-exploit
nomisec STUB
by Scouserr · poc
https://github.com/Scouserr/cve-2022-0847-poc-dockerimage
github FAILED
by venkyr · cpoc
https://github.com/venkyr/cve-pocs/tree/main/CVE-2022-0847
metasploit WORKING POC EXCELLENT
by Max Kellermann, timwr · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
vulncheck_xdb WORKING POC
local
https://github.com/N1rv0us/kernel_exploitation
vulncheck_xdb WORKING POC
local
https://github.com/siegfrkn/CSCI5403_CVE20220847_Detection
vulncheck_xdb WORKING POC
local
https://github.com/ch1lL9uy/TTCS
exploitdb WORKING POC
by Lance Biggerstaff · clocallinux
https://www.exploit-db.com/exploits/50808
vulncheck_xdb WORKING POC
local
https://github.com/greenhandatsjtu/CVE-2022-0847
vulncheck_xdb WORKING POC
local
https://github.com/LudovicPatho/CVE-2022-0847

Scores

CVSS v3 7.8
EPSS 0.8245
EPSS Percentile 99.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation Intel

CISA KEV 2022-04-25
VulnCheck KEV 2022-04-25
InTheWild.io 2022-04-25
ENISA EUVD EUVD-2022-15890
Ransomware Use Confirmed

Classification

CWE
CWE-665
Status published

Affected Products (40)

linux/linux_kernel < 5.10.102
fedoraproject/fedora
redhat/enterprise_linux
redhat/enterprise_linux_eus
redhat/enterprise_linux_eus
redhat/enterprise_linux_for_ibm_z_systems
redhat/enterprise_linux_for_ibm_z_systems_eus
redhat/enterprise_linux_for_ibm_z_systems_eus
redhat/enterprise_linux_for_power_little_endian
redhat/enterprise_linux_for_power_little_endian_eus
redhat/enterprise_linux_for_power_little_endian_eus
redhat/enterprise_linux_for_real_time
redhat/enterprise_linux_for_real_time_for_nfv
redhat/enterprise_linux_for_real_time_for_nfv_tus
redhat/enterprise_linux_for_real_time_for_nfv_tus
... and 25 more

Timeline

Published Mar 10, 2022
KEV Added Apr 25, 2022
Tracked Since Feb 18, 2026